$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft File: bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json) Hash identifier: hcMnzqgojb9wrgiAESaP2OiDkB0RcKkFj6cVvUFxNr0= Subject key identifier: 81:6E:11:21:2F:F6:68:2C:63:6D:6A:7B:F1:59:D9:6B:C2:81:3F:AB Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 Certificate issuer: /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft Manifest number: 04AA Signing time: Sat 23 Aug 2025 00:11:01 +0000 Manifest this update: Sat 23 Aug 2025 00:11:00 +0000 Manifest next update: Sat 30 Aug 2025 00:11:00 +0000 Files and hashes: 1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: v8DofXeKbGTVOaNgzNDAjTZJtbV/9iXMKm0sX4BHdb4=) 2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: eaIiY9RvMlvN9KkRdh0VxXvRbPe5lNuNtQtAJNjGWj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Validity Not Before: Aug 23 00:11:00 2025 GMT Not After : Aug 30 00:11:00 2025 GMT Subject: CN=68a90714-7f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:f0:d5:c6:94:19:86:2b:a5:6e:a8:18:9e: 0a:31:44:01:d7:e4:80:a6:b7:00:99:1e:e7:51:14: 40:54:a0:22:d5:b3:f4:b2:d3:95:88:8f:f2:65:9c: 62:01:c7:e7:e9:aa:94:7c:b2:ed:c6:ef:da:f3:74: d7:42:e7:c8:ce:39:49:1e:1b:18:c7:1d:95:a9:88: 13:56:57:de:3d:34:eb:d8:3a:78:f7:db:36:6d:9f: 64:9e:ca:71:91:59:34:d4:68:62:3c:ef:a3:c1:4e: a2:0c:d8:e5:4a:2f:9b:0f:a8:6f:d1:41:ac:f6:fc: 32:4d:58:40:2a:ec:12:1f:18:75:c4:ec:00:22:56: 95:41:5e:e3:5f:8a:07:75:dd:81:9b:79:dd:46:cc: f6:c4:e4:af:37:21:44:f4:b9:db:ba:e6:58:f7:33: 0f:c3:02:c6:47:b5:cc:85:48:1b:61:0c:aa:fd:6f: cd:a3:15:9f:08:67:c6:ad:06:a6:ac:27:c5:e2:cd: 60:98:b0:67:37:66:9f:68:50:e3:f9:1f:a0:cb:57: 93:ef:d3:e0:36:42:ff:e1:27:9a:7e:42:df:44:79: 7c:b9:ca:6f:36:64:2e:0d:06:56:0f:13:10:13:30: c4:2a:31:b2:bf:35:fc:d0:9d:2a:fb:69:1b:1c:45: e5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6E:11:21:2F:F6:68:2C:63:6D:6A:7B:F1:59:D9:6B:C2:81:3F:AB X509v3 Authority Key Identifier: keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1a:8d:2b:b7:e4:29:f7:fb:5f:db:e1:9d:f1:14:3a:30:94: c1:c0:19:f3:ff:e2:10:78:3c:c4:0e:3d:43:bc:32:f6:5e:10: 5b:5b:d6:79:97:9d:60:f0:f8:07:5c:b8:28:d9:fd:bb:1e:f1: 31:b8:43:bb:ee:44:3a:43:13:13:ba:42:ae:bb:11:fe:03:1c: 19:24:16:02:4a:09:01:73:f9:f1:61:8c:14:0c:f7:dd:43:66: 42:40:4f:bb:81:60:6e:c7:7d:fa:91:4d:12:be:28:95:98:ec: 94:d0:ff:cf:d4:de:d9:05:48:b8:01:f0:55:03:45:ed:25:9d: 2c:88:66:6d:37:bb:78:f0:f5:4e:38:98:90:fe:1c:3f:c0:ba: b2:37:a8:7d:c3:7d:4c:7d:38:79:45:d9:71:96:55:3a:70:6d: 56:4b:ee:f3:2b:49:a4:29:40:76:35:48:5b:06:c7:3a:24:64: e4:58:cd:43:e9:67:05:44:bf:27:bf:dd:7b:ad:f4:79:57:e9: c5:19:d1:92:2e:19:94:c6:f0:75:9c:05:29:33:d8:c8:b7:2b: 9a:0c:0d:9a:30:e7:47:a7:da:6e:cd:5a:51:00:34:dc:cf:5c: dc:5e:37:8e:75:58:d3:a0:a3:3f:40:03:ab:ca:9a:1a:9f:72: 89:5b:5f:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKDZFQTA3QkQwM0U4MzQ3QTgwNUJBNUFGNDg4QjMyQjJG OUExNDJFRjkwHhcNMjUwODIzMDAxMTAwWhcNMjUwODMwMDAxMTAwWjAYMRYwFAYD VQQDEw02OGE5MDcxNC03ZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfrw1caUGYYrpW6oGJ4KMUQB1+SAprcAmR7nURRAVKAi1bP0stOViI/yZZxi Acfn6aqUfLLtxu/a83TXQufIzjlJHhsYxx2VqYgTVlfePTTr2Dp499s2bZ9knspx kVk01GhiPO+jwU6iDNjlSi+bD6hv0UGs9vwyTVhAKuwSHxh1xOwAIlaVQV7jX4oH dd2Bm3ndRsz2xOSvNyFE9LnbuuZY9zMPwwLGR7XMhUgbYQyq/W/NoxWfCGfGrQam rCfF4s1gmLBnN2afaFDj+R+gy1eT79PgNkL/4SeafkLfRHl8ucpvNmQuDQZWDxMQ EzDEKjGyvzX80J0q+2kbHEXl7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFuESEv 9mgsY21qe/FZ2WvCgT+rMB8GA1UdIwQYMBaAFG6ge9A+g0eoBbpa9IizKy+aFC75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8yMjNFM0E1MDQ2 OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2Z0Z1bHIwaUxNckw1b1VM dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JxQjcwRDZEUjZnRnVscjBpTE1yTDVvVUx2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8yMjNFM0E1MDQ2OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2 Z0Z1bHIwaUxNckw1b1VMdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuGo0rt+Qp9/tf2+Gd8RQ6MJTBwBnz/+IQeDzEDj1DvDL2XhBbW9Z5 l51g8PgHXLgo2f27HvExuEO77kQ6QxMTukKuuxH+AxwZJBYCSgkBc/nxYYwUDPfd Q2ZCQE+7gWBux336kU0SviiVmOyU0P/P1N7ZBUi4AfBVA0XtJZ0siGZtN7t48PVO OJiQ/hw/wLqyN6h9w31MfTh5RdlxllU6cG1WS+7zK0mkKUB2NUhbBsc6JGTkWM1D 6WcFRL8nv917rfR5V+nFGdGSLhmUxvB1nAUpM9jItyuaDA2aMOdHp9puzVpRADTc z1zcXjeOdVjToKM/QAOrypoan3KJW1/z -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:55 2025 by rpki-client